Which of the following is a documentation of guidelines that computer forensics experts use to handle evidences?

Chain of evidence is not a recognized standard forensic term - the correct and legally accepted term for evidence handling documentation is chain of custody.

Chain of custody is the documented, chronological record used by computer forensics experts to track the collection, transfer, storage, and access of evidence - it ensures evidence integrity and legal admissibility by providing a verifiable audit trail of every person who handled the evidence.

An incident response policy defines the organization's procedures for detecting and responding to security incidents, but it does not specifically govern the handling and tracking of forensic evidence.

An evidence access policy may define who is permitted to access evidence, but it is not the documentation standard that tracks the full handling history of evidence required in forensic practice.